Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
File: F91B41A40C5811EFB9F63337C4F9AE02.roa (raw, json)
Hash identifier: NmJNgM1TocJKXWdxIqSxjaeXJhysWvNCkav+9g71gx8=
Subject key identifier: B2:30:C0:05:E4:D0:F6:7F:11:AB:7B:CE:52:08:29:CE:32:51:C2:F8
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 02FA
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
Signing time: Tue 07 May 2024 10:02:55 +0000
ROA not before: Tue 07 May 2024 10:02:55 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132601
IP address blocks: 103.181.180.0/24 maxlen: 24
2001:df0:7140::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: May 7 10:02:55 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6639fc4f-2118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:42:c8:4e:a9:f3:a2:55:cf:db:96:00:a7:
0c:4b:91:e0:e6:9b:79:93:ad:e7:de:ab:af:ca:a3:
86:ae:98:5d:60:4b:c5:d7:3d:3a:db:cb:0d:1a:c3:
b9:e7:0d:39:50:13:91:5f:34:56:b4:f6:2a:35:45:
de:66:41:b7:9b:78:9f:d5:8f:f2:eb:7d:96:a4:20:
58:32:8f:79:a8:80:90:3b:91:eb:8d:92:ee:10:2f:
01:35:a5:bb:14:00:87:d9:f0:e4:fb:ca:a4:f4:e8:
48:c2:ed:1c:5e:18:6e:a5:2b:df:8f:20:73:2d:69:
0a:ea:d2:b8:b3:80:2d:d9:ea:ca:6f:5c:eb:5a:49:
99:07:96:c5:48:5d:47:d9:a1:e5:81:8c:33:03:dd:
e8:85:90:59:2a:4d:e8:1e:6f:7f:77:2a:e6:84:3e:
0a:a8:ff:ef:eb:70:8f:87:34:a2:15:ce:8f:32:bf:
d1:9e:45:16:21:43:e9:96:3e:cd:ce:a4:f0:8f:47:
8d:76:99:96:22:f2:1e:e6:0a:ab:5d:6c:bd:92:c2:
9e:07:e5:df:7c:71:80:87:f9:b0:8a:fc:99:d0:d4:
cf:f0:e1:da:38:50:1c:7a:e7:e8:47:21:b5:7a:4f:
d3:12:85:42:3d:eb:e1:39:40:f2:ae:25:65:ed:87:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:C0:05:E4:D0:F6:7F:11:AB:7B:CE:52:08:29:CE:32:51:C2:F8
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.180.0/24
IPv6:
2001:df0:7140::/48
Signature Algorithm: sha256WithRSAEncryption
b1:82:3b:51:70:c0:32:12:37:ed:1e:2f:ba:3d:99:cf:ae:be:
ac:a0:72:93:9c:cf:b9:27:f6:18:1b:58:d5:1c:57:6c:6e:31:
0c:6c:23:a0:64:82:2b:e2:60:2e:db:45:9d:e9:99:f8:ac:a0:
84:8c:50:dd:fb:9a:19:5b:d1:d7:3c:9f:6b:c8:a9:5b:c2:c8:
d2:75:b5:fd:91:93:f8:19:b2:9d:a0:4a:c3:3f:6f:ac:12:ff:
1f:11:24:ec:5e:a8:b2:0c:ed:61:cc:20:89:9b:aa:af:55:3b:
1f:99:b6:33:c8:7e:42:85:d9:66:24:44:ff:6d:91:c5:35:de:
ca:32:b6:36:7c:af:57:30:aa:34:c0:22:b2:3a:b6:7d:d4:e0:
34:ce:77:83:24:b6:81:9e:49:6e:fb:4b:7d:c4:bb:72:75:6f:
38:55:db:2b:52:a6:fb:04:38:08:93:e8:f9:2d:1a:fd:ea:ef:
c3:8f:94:b7:8c:de:d3:11:4c:55:e3:16:ad:ca:44:d4:63:92:
b1:23:53:5b:09:f0:76:54:c8:3e:82:dd:27:34:4c:1e:5b:bf:
45:89:0c:b8:b7:49:07:ad:98:28:ff:71:a5:11:bb:a0:1b:9a:
f6:41:12:2d:32:3d:94:a6:a1:fe:e9:7e:b3:ee:e6:d0:2b:1f:
56:bc:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:12 2025 by rpki-client